Responsible Party
Z.E.P.H.Y.R. Solutions
Z.E.P.H.Y.R. Solutions is represented by its CEO, CTO, and COO. 

Contact:
E-Mail:info@zephyrsolutions.de
Website: zephyrsolutions.de

Data Protection Inquiries
If you have any questions regarding data protection, please contact our COO:
info@zephyrsolutions.de

Security

We implement comprehensive technical and organizational measures to protect your personal data from unauthorized access, misuse, loss, or other external threats. All data transmissions are secured using encryption protocols, e.g., TLS. Security measures are regularly reviewed and updated according to the latest technical standards.

Information on Your Rights (Data Subject Rights)

If we process personal data about you, you have the following rights under the GDPR:

• Right of access (Art. 15 GDPR)
  
  
• Right to rectification (Art. 16 GDPR)
  
  
• Right to erasure (“right to be forgotten”) (Art. 17 GDPR)
  
  
• Right to restriction of processing (Art. 18 GDPR)
  
  
• Right to data portability (Art. 20 GDPR)
  
  
• Right to object (Art. 21 GDPR)
  
  
• Right to withdraw consent (Art. 7(3) GDPR)
  
  
• Right to lodge a complaint (Art. 77 GDPR)
  
  

Website Usage and Surveys

Description, Scope, and Purpose of Data Processing
Visiting our website generally does not reveal your identity. Access data (IP address, operating system, browser and device used, date/time, requested file, data volume, response code) is temporarily stored in log files. These are not used to identify individuals or combined with other data sources.

We use strictly necessary session cookies to ensure website functionality. No other cookies are set.

Additionally, we collect personal data through LimeSurvey for surveys, feedback forms, or event/project registrations. This may include, but is not limited to, names, email addresses, and other information voluntarily provided. Data collected via LimeSurvey is processed solely for survey execution, analysis, and follow-up communication.

Recipients of Personal Data
Accessible to internal staff and service providers, including LimeSurvey, who implement adequate technical and organizational measures in compliance with the GDPR.

Legal Basis of Data Processing

• Website data: Art. 6(1)(f) GDPR (legitimate interest)
  
  
• LimeSurvey data: Art. 6(1)(b) GDPR (pre-contractual/contractual purposes) and/or Art. 6(1)(a) GDPR (consent)
  
  

Retention Period
Data is deleted, blocked, or anonymized once the purpose is fulfilled. Log files: max. 90 days; session cookies: session end/browser closure. LimeSurvey data: deleted after purpose fulfillment unless legally required or needed for claims.

Contact Requests

Description, Scope, and Purpose
When contacting us via email, letter, or online form, your personal data is processed to handle and respond to your request.

Recipients
Internal staff and, if required, external service providers or subcontractors.

Retention Period
Deleted once the purpose is fulfilled unless legal obligations or claims require retention.

Clients, Waiting List Members, and Interested Persons Data

Purpose and Scope
We process data of clients (companies), waiting list members, and interested persons (e.g., company name, contact person, address, email, and, if applicable, bank details) for client management, support, communication, and organizational purposes.

Legal Basis
Art. 6(1)(b) GDPR (pre-contractual/contractual purposes) and/or Art. 6(1)(a) GDPR (consent), depending on the type of data collected.

Recipients
Internal staff and executive board.

Retention Period

• Clients (companies): Deleted 10 years after contract or service relationship formally ends unless legal obligations or claims require longer retention.
  
  
• Waiting list members / interested persons: Deleted once the purpose (information provision or potential client engagement) no longer applies, unless consented for longer-term communication.
  
  

Events and Projects

Purpose and Scope
Data collected during event/project registration (name, address, email, bank details) is used for organization, execution, and evaluation.

Legal Basis
Art. 6(1)(b) GDPR (pre-contractual/contractual purposes).

Recipients
Internal staff (event/project coordinators, marketing, executive board) and, if required, external service providers or subcontractors.

Retention Period
Deleted after evaluation, maximum three months post-event/project, unless legal obligations or claims require retention.

Images, Videos, and Audio Recordings

Purpose and Scope
Recordings during events may be used for publication (print, website, social media) or documentation.

Legal Basis
Art. 6(1)(f) GDPR (legitimate interest) for documentation, marketing, PR, and reporting purposes.

Recipients
Internal marketing staff and executive board; publication may reach unknown third parties.

Retention Period
Kept indefinitely unless consent is withdrawn.